# Create a Certificate

To create a Certificate, follow these steps:

1\. In the **DCD**, go to **Menu** > **Security** > **Certificate Manager**.

2\. Click **Create Certificate** from the **Certificate Manager** page under the **Certificates** tab.

3\. Choose the **Certificate type** to create:

* **Auto certificate:** This certificate type can be used for [<mark style="color:blue;">CDN</mark>](https://docs.ionos.com/sections-test/guides/network-services/cdn).
* **Import a certificate:** This certificate type can be used for [<mark style="color:blue;">Managed Application Load Balancer</mark>](https://docs.ionos.com/sections-test/guides/network-services/application-load-balancer) and [<mark style="color:blue;">CDN</mark>](https://docs.ionos.com/sections-test/guides/network-services/cdn).

4\. Configure the following details based on the **Certificate type** to create:

{% tabs %}
{% tab title="Auto certificate" %}
{% hint style="info" %}
**Prerequisite:** Make sure that the domain for which you are requesting the certificate has its zone managed via the [<mark style="color:blue;">Cloud DNS</mark>](https://docs.ionos.com/sections-test/guides/network-services/cloud-dns).
{% endhint %}

* In the **Certificate Provider**, **Select Provider** from the drop-down list. The list displays all the created ACME providers. To create a new one, see [<mark style="color:blue;">Create ACME Provider</mark>](https://docs.ionos.com/sections-test/guides/security/certificate-manager/dcd-how-tos/create-acme-provider).
* In the **Properties**, configure the following:
  * **Certificate Name:** Enter a name to identify the certificate uniquely.
  * **Common Name:** Enter a common name for the certificate.
  * **Key Algorithm:** From the drop-down list, choose the type of Rivest-Shamir-Adleman (RSA) algorithm for the certificate. RSA is a widely used public-key encryption algorithm for secure data transmission. It generates key pairs and digital signatures.
  * *(Optional)* **Subject Alternative Names:** You can add up to 10 names to the certificate.

![Create Auto Certificate](https://1737632334-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MifAzdGvKLDTtvJP8sm%2Fuploads%2Fgit-blob-9016f81c39f9c59500379a23d3bc6d95540af88b%2Fcertificate-manager-create-auto-certificate.png?alt=media)

{% hint style="info" %}
\*\*Note:\*\* Alternatively, you can also create an auto certificate from \*\*Certificate Manager\*\* page > \*\*ACME Providers\*\* and click \*\*Create Auto Certificate\*\* next to an existing \*\*ACME Provider\*\*. For more information, see \[<mark style="color:blue;">Create a Auto Certificate from ACME Providers</mark>]\(create-certificate.md#create-a-auto-certificate-from-acme-providers).
{% endhint %}
{% endtab %}

{% tab title="Import a certificate" %}

* In the **Properties**, configure the following:
  * **Certificate Name:** Enter a name to identify the certificate uniquely.
  * **Certificate:** You can drag-and-drop or upload a file in the Privacy-Enhanced Mail (PEM) format or enter the content of the certificate file.
  * **Certificate Chain:** Drag-and-drop or upload a file in the PEM format or enter the content of the certificate file, including the certificate chain, a series of certificates that establish a chain of trust from the end-entity certificate to a trusted root certificate.
  * **Private Key:** Drag-and-drop or upload a file in the PEM format or enter the content of the certificate file that includes the private key information necessary for decryption and signing.

![Import a Certificate](https://1737632334-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MifAzdGvKLDTtvJP8sm%2Fuploads%2Fgit-blob-7442a45095aa81ecd5845433b3aa906d8782e57c%2Fcertificate-manager-create-import-certificate.png?alt=media)
{% endtab %}
{% endtabs %}

5\. Click **Create** to apply to the certificate configuration.

{% hint style="success" %}
**Result:** Based on the **Certificate type** chosen, the corresponding Certificate is successfully created.
{% endhint %}

## Create a Auto Certificate from ACME Providers

1\. In the **DCD**, go to **Menu** > **Security** > **Certificate Manager**.

2\. In the **Certificate Manager** page, go to **ACME Providers** tab. A list of existing **ACME Providers** are listed.

3\. Click **Create Auto Certificate** against the **ACME Provider** for which you want the certificate to be created.

![Create Auto Certificate](https://1737632334-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MifAzdGvKLDTtvJP8sm%2Fuploads%2Fgit-blob-ea55a38df99b3132bae14907fb5a3f8bc09106b6%2Fcertificate-manager-create-auto-certificate-acme-provider.png?alt=media)

4\. Configure the **Certificate Provider** and **Properties**. For more information, see **Auto certificate** details under [<mark style="color:blue;">Create a Certificate</mark>](https://docs.ionos.com/sections-test/guides/security/certificate-manager/dcd-how-tos/create-certificate).

![Configure Auto Certificate](https://1737632334-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MifAzdGvKLDTtvJP8sm%2Fuploads%2Fgit-blob-7728852a4fc32422e126cb7619ff92da67bbedf1%2Fcertificate-manager-configure-auto-certificate.png?alt=media)

5\. Click **Create** to apply to the certificate configuration.

{% hint style="success" %}
**Result:** The **Auto certificate** is successfully created for the selected **ACME Provider**.
{% endhint %}